Nixpkgs security tracker

Permalink CVE-2026-4732

created 5 months, 2 weeks ago Activity log

Created suggestion 5 months, 2 weeks ago

Out-of-bounds Read Overflow in tildearrow/furnace

Out-of-bounds Read vulnerability in tildearrow furnace (‎extern/libsndfile-modified/src modules). This vulnerability is associated with program files flac.C‎. This issue affects furnace: before 0.7.

References

https://github.com/tildearrow/furnace/pull/2812 patch

Affected products

furnace

<0.7

Matching in nixpkgs

pkgs.furnace

Multi-system chiptune tracker compatible with DefleMask modules

nixos-unstable -
- nixpkgs-unstable 0.6.8.3
- nixos-unstable-small 0.6.8.3

pkgs.waterfurnace_aurora

Tools for communication with WaterFurnace Aurora control systems

nixos-unstable -
- nixpkgs-unstable 1.5.8
- nixos-unstable-small 1.5.8

pkgs.python312Packages.waterfurnace

None

pkgs.python313Packages.waterfurnace

Python interface to waterfurnace geothermal systems

nixos-unstable -
- nixpkgs-unstable 1.6.2
- nixos-unstable-small 1.6.4

pkgs.python314Packages.waterfurnace